# Huntress Reports Active Intrusions Targeting FOUNDATION Accounting Software

DevFeed: [Huntress Reports Active Intrusions Targeting FOUNDATION Accounting Software](<https://devfeed.tech/articles/cracks-in-the-foundation-foundation-accounting-intrusions-huntress-54256.md>)

Original publisher: [Read original article](<https://www.huntress.com/blog/cracks-in-the-foundation-intrusions-of-foundation-accounting-software>)

Author: Team Huntress

Published: 2024-09-17T00:00:00Z

Content type: article

Language: en

Sources: [Huntress Blog](<https://devfeed.tech/sources/huntress-blog.md>)

Topics: [Exploit](<https://devfeed.tech/topics/exploit.md>), [Database](<https://devfeed.tech/topics/database.md>), [sql-server](<https://devfeed.tech/topics/sql-server.md>), [passwords](<https://devfeed.tech/topics/passwords.md>), [Firewall](<https://devfeed.tech/topics/firewall.md>), [execution](<https://devfeed.tech/topics/execution.md>), [Shell](<https://devfeed.tech/topics/shell.md>), [Internet](<https://devfeed.tech/topics/internet.md>)

Tags: [database](<https://devfeed.tech/tags/database.md>), [exploit](<https://devfeed.tech/tags/exploit.md>), [firewall](<https://devfeed.tech/tags/firewall.md>), [huntress](<https://devfeed.tech/tags/huntress.md>), [mssql](<https://devfeed.tech/tags/mssql.md>), [password](<https://devfeed.tech/tags/password.md>), [server](<https://devfeed.tech/tags/server.md>), [shell](<https://devfeed.tech/tags/shell.md>), [sql-server](<https://devfeed.tech/tags/sql-server.md>)

## AI overview

Huntress reports active intrusions targeting FOUNDATION Accounting Software, which is used by construction contractors. Attackers are brute-forcing publicly accessible deployments and using unchanged default credentials to access Microsoft SQL Server accounts. The article describes xp_cmdshell abuse and recommends rotating credentials, restricting public exposure, and disabling xp_cmdshell where appropriate.

## Source excerpt

Threat actors have been successful in gaining entry using accounting software commonly used by construction companies.